mediaassets.1041kqth.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:15:4f:b0:90:0d:ca:16:89:5b:15:4a:30:fe:bf:a0:4c was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediaassets.1041kqth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:15:4f:b0:90:0d:ca:16:89:5b:15:4a:30:fe:bf:a0:4c
Serial Number (int): 313768669861585784057262150573576113070156
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:7d:ba:24:d6:7d:c5:ae:b1:7d:67:77:b3:34:66:eb:a1:df:0b:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:bc:c1:16:c9:3c:ce:16:1e:97:4f:fd:b7:ab:62:f3:6f:68:b5:c9
Fingerprint (sha256): ed:d5:33:ef:23:dc:b0:ed:ba:a4:28:9b:38:f8:5b:d0:2a:a0:59:2d:52:60:cd:eb:d3:67:33:65:16:38:f6:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mediaassets.1041kqth.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediaassets.1041kqth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.10news.com
media.abc15.com
media.abc2news.com
media.abcactionnews.com
media.bartlesvillelive.com
media.kjrh.com
media.kshb.com
media.kypost.com
media.nbcactionnews.com
media.newsnet5.com
media.scrippsnationalnews.com
media.thedenverchannel.com
media.theindychannel.com
media.thelistshow.tv
media.thelisttv.com
media.turnto23.com
media.wcpo.com
media.wptv.com
media.wsts1.com
media.wsts2.com
media.wxyz.com
media2.abc15.com
media2.abc2news.com
media2.abcactionnews.com
media2.bartlesvillelive.com
media2.kjrh.com
media2.kshb.com
media2.kypost.com
media2.nbcactionnews.com
media2.newsnet5.com
media2.scrippsnationalnews.com
media2.wcpo.com
media2.wkbw.com
media2.wptv.com
media2.wsts1.com
media2.wsts2.com
media2.wxyz.com
mediaassets.1041kqth.com
mediaassets.1045thefox.com
mediaassets.104star.com
mediaassets.1063thegroove.com
mediaassets.1067theriver.com
mediaassets.1170kfaq.com
mediaassets.620wtmj.com
mediaassets.929bobfm.com
mediaassets.929thedrive.com
mediaassets.931wnox.com
mediaassets.bigcountry995.com
mediaassets.caller.com
mediaassets.cd1059.com
mediaassets.channel941.com
mediaassets.classiccountry1070.com
mediaassets.commercialappeal.com
mediaassets.courierpress.com
mediaassets.fox47news.com
mediaassets.fox4now.com
mediaassets.gosanangelo.com
mediaassets.hot1045.net
mediaassets.independentmail.com
mediaassets.ironcheftucson.com
mediaassets.kfdi.com
mediaassets.kgun9.com
mediaassets.khits.com
mediaassets.khits.fm
mediaassets.kitsapsun.com
mediaassets.kivitv.com
mediaassets.kmtv.com
mediaassets.knoxbride.com
mediaassets.knoxnews.com
mediaassets.ksgf.com
mediaassets.kticountry.com
mediaassets.ktnv.com
mediaassets.ktts.com
mediaassets.kvoo.com
mediaassets.mixfm.com
mediaassets.nbc26.com
mediaassets.newschannel5.com
mediaassets.power965.com
mediaassets.q100country.com
mediaassets.radiolobo1065.com
mediaassets.redding.com
mediaassets.reporternews.com
mediaassets.riverinteractive.com
mediaassets.star1021fm.com
mediaassets.t95.com
mediaassets.tcpalm.com
mediaassets.thecwtucson.com
mediaassets.timesrecordnews.com
mediaassets.tmj4.com
mediaassets.tntradioempire.com
mediaassets.tv20detroit.com
mediaassets.varietyrocks.com
mediaassets.vcstar.com
mediaassets.wtmj.com
mediaassets.xrock.com
mediaassets.z92.com
www.ndnadvertising.com

Other certificates including the domain name 1041kqth.com

(limited to 100 certificates)
lakana-02.map.fastly.net
www.1041kqth.com
sharing.1041kqth.com
1041kqth.com
lakana-02.map.fastly.net
1041kqth.com
1041kqth.com
mediaassets.1041kqth.com
1041kqth.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
www.1041kqth.com
www.1041kqth.com
sharing.1041kqth.com
sharing.1041kqth.com
lakana-02.map.fastly.net
sharing.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
lakana-02.map.fastly.net
1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
www.1041kqth.com

Certificate

The complete raw certificate details for mediaassets.1041kqth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQCE9Op5EygVmX01ALN8
5bDYUGUTifsCyDoGHlYO4L+x6LaqICRyRteAXG+Iz8XKjW9q7zeU5C2BGk/C3Ny/
WipAOz6MSW/GcdHirYtD/uDNVkV6oNByoiGv18OJaBKShGuMm6P6DB2YgxrRUwQN
z+UQ3LZDYSjHSaqSrjT8w/gA9ubqyIvi7qxcxB4fA7EAbY6kkm4bVxJrxIqYkiWw
ZJb51Uh4O4u9Ch0tarUH1i7gW7UxqNEx/NXbxLXGYnD3HD/6Y1lYs7VDqvzOf+G9
YX6whAQm/IVYqE8GMmPgOzyfWMhnzNDPV2mke/bfcqV4nMsNqLcX4d/pUhdGRSw3
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313768669861585784057262150573576113070156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-14 17:47:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 17:47:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediaassets.1041kqth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23859295745591793060449333132811764451425000637189118207492269172155189706894659126084678141380072230498444442670843318522752283594783286076329401797143725522180328510679034760215089642298766145164097168630195094351238237813374904946504754017109362879125917040064004756587521750995243637856822755160806996639676070195762863947185336620904760004501706968046615763842205692512764389233524528442174457330047036492648540953759120886363839972687582617231264260566393053216465391079355299870183362808857863841754396441126840827134935727201434379773987599497721138807745100086410386026838018169917930064326021169864975857661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							097dba24d67dc5aeb17d6777b33466eba1df0b06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.10news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.bartlesvillelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nbcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thedenverchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.theindychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thelistshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thelisttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.turnto23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wsts1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wsts2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.bartlesvillelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.nbcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wkbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wsts1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wsts2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1041kqth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1045thefox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.104star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1063thegroove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1067theriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1170kfaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.620wtmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.929bobfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.929thedrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.931wnox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.bigcountry995.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.cd1059.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.channel941.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.classiccountry1070.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.fox47news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.fox4now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.hot1045.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ironcheftucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kfdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kgun9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.khits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.khits.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kivitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.knoxbride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ksgf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kticountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ktnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ktts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kvoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.mixfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.nbc26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.newschannel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.power965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.q100country.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.radiolobo1065.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.riverinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.star1021fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.t95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tcpalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.thecwtucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.timesrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tmj4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tntradioempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tv20detroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.varietyrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.vcstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wtmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.xrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.z92.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndnadvertising.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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